CVE-2023-24838: HGiga PowerStation - Information Leakage

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-03-27 · updated 2026-06-17
Weakness: CWE-200

Description

HGiga PowerStation has a vulnerability of Information Leakage. An unauthenticated remote attacker can exploit this vulnerability to obtain the administrator's credential. This credential can then be used to login PowerStation or Secure Shell to achieve remote code execution.

Affected products

HGiga PowerStation: before x64.6.2.165 — fixed in x64.6.2.165

How to fix

Upgrade to a fixed version: HGiga PowerStation x64.6.2.165. Check the vendor advisory for mitigations.

References

https://www.twcert.org.tw/tw/cp-132-6957-d8f67-1.html
https://www.twcert.org.tw/tw/cp-132-6957-d8f67-1.html

Get alerted when CVE-2023-24838 or the next vulnerability affects your stack